7.5

CVE-2019-0013

Junos OS: RPD crash upon receipt of malformed PIM packet

The routing protocol daemon (RPD) process will crash and restart when a specific invalid IPv4 PIM Join packet is received. While RPD restarts after a crash, repeated crashes can result in an extended Denial of Service (DoS) condition. This issue only affects IPv4 PIM. IPv6 PIM is unaffected by this vulnerability. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D77; 12.3X48 versions prior to 12.3X48-D77; 15.1 versions prior to 15.1F6-S10, 15.1R6-S6, 15.1R7; 15.1X49 versions prior to 15.1X49-D150; 15.1X53 versions prior to 15.1X53-D233, 15.1X53-D59; 16.1 versions prior to 16.1R3-S8, 16.1R4-S8, 16.1R7; 16.2 versions prior to 16.2R2-S6; 17.1 versions prior to 17.1R2-S6, 17.1R3; 17.2 versions prior to 17.2R2-S3, 17.2R3; 17.3 versions prior to 17.3R2-S4, 17.3R3; 17.4 versions prior to 17.4R2.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Juniper ≫ Junos Version 12.1x46
Juniper ≫ Junos Version 12.1x46 Update d10
Juniper ≫ Junos Version 12.1x46 Update d15
Juniper ≫ Junos Version 12.1x46 Update d20
Juniper ≫ Junos Version 12.1x46 Update d25
Juniper ≫ Junos Version 12.1x46 Update d30
Juniper ≫ Junos Version 12.1x46 Update d35
Juniper ≫ Junos Version 12.1x46 Update d40
Juniper ≫ Junos Version 12.1x46 Update d45
Juniper ≫ Junos Version 12.1x46 Update d50
Juniper ≫ Junos Version 12.1x46 Update d55
Juniper ≫ Junos Version 12.1x46 Update d60
Juniper ≫ Junos Version 12.1x46 Update d65
Juniper ≫ Junos Version 12.1x46 Update d66
Juniper ≫ Junos Version 12.1x46 Update d67
Juniper ≫ Junos Version 12.1x46 Update d71
Juniper ≫ Junos Version 12.1x46 Update d76
Juniper ≫ Junos Version 12.3x48
Juniper ≫ Junos Version 12.3x48 Update d10
Juniper ≫ Junos Version 12.3x48 Update d15
Juniper ≫ Junos Version 12.3x48 Update d25
Juniper ≫ Junos Version 12.3x48 Update d30
Juniper ≫ Junos Version 12.3x48 Update d35
Juniper ≫ Junos Version 12.3x48 Update d40
Juniper ≫ Junos Version 12.3x48 Update d45
Juniper ≫ Junos Version 12.3x48 Update d50
Juniper ≫ Junos Version 12.3x48 Update d51
Juniper ≫ Junos Version 12.3x48 Update d55
Juniper ≫ Junos Version 12.3x48 Update d60
Juniper ≫ Junos Version 12.3x48 Update d66
Juniper ≫ Junos Version 12.3x48 Update d70
Juniper ≫ Junos Version 12.3x48 Update d75
Juniper ≫ Junos Version 15.1
Juniper ≫ Junos Version 15.1 Update f6
Juniper ≫ Junos Version 15.1 Update r1
Juniper ≫ Junos Version 15.1 Update r2
Juniper ≫ Junos Version 15.1 Update r3
Juniper ≫ Junos Version 15.1 Update r4
Juniper ≫ Junos Version 15.1 Update r5
Juniper ≫ Junos Version 15.1 Update r6
Juniper ≫ Junos Version 15.1x49 Update d10
Juniper ≫ Junos Version 15.1x49 Update d100
Juniper ≫ Junos Version 15.1x49 Update d110
Juniper ≫ Junos Version 15.1x49 Update d120
Juniper ≫ Junos Version 15.1x49 Update d130
Juniper ≫ Junos Version 15.1x49 Update d140
Juniper ≫ Junos Version 15.1x49 Update d20
Juniper ≫ Junos Version 15.1x49 Update d30
Juniper ≫ Junos Version 15.1x49 Update d35
Juniper ≫ Junos Version 15.1x49 Update d40
Juniper ≫ Junos Version 15.1x49 Update d45
Juniper ≫ Junos Version 15.1x49 Update d50
Juniper ≫ Junos Version 15.1x49 Update d55
Juniper ≫ Junos Version 15.1x49 Update d60
Juniper ≫ Junos Version 15.1x49 Update d65
Juniper ≫ Junos Version 15.1x49 Update d70
Juniper ≫ Junos Version 15.1x49 Update d75
Juniper ≫ Junos Version 15.1x49 Update d80
Juniper ≫ Junos Version 15.1x49 Update d90
Juniper ≫ Junos Version 15.1x53 Update d20
Juniper ≫ Junos Version 15.1x53 Update d21
Juniper ≫ Junos Version 15.1x53 Update d210
Juniper ≫ Junos Version 15.1x53 Update d230
Juniper ≫ Junos Version 15.1x53 Update d231
Juniper ≫ Junos Version 15.1x53 Update d232
Juniper ≫ Junos Version 15.1x53 Update d25
Juniper ≫ Junos Version 15.1x53 Update d30
Juniper ≫ Junos Version 15.1x53 Update d32
Juniper ≫ Junos Version 15.1x53 Update d33
Juniper ≫ Junos Version 15.1x53 Update d34
Juniper ≫ Junos Version 15.1x53 Update d40
Juniper ≫ Junos Version 15.1x53 Update d45
Juniper ≫ Junos Version 15.1x53 Update d56
Juniper ≫ Junos Version 15.1x53 Update d60
Juniper ≫ Junos Version 15.1x53 Update d61
Juniper ≫ Junos Version 15.1x53 Update d62
Juniper ≫ Junos Version 15.1x53 Update d63
Juniper ≫ Junos Version 15.1x53 Update d64
Juniper ≫ Junos Version 15.1x53 Update d65
Juniper ≫ Junos Version 15.1x53 Update d66
Juniper ≫ Junos Version 15.1x53 Update d70
Juniper ≫ Junos Version 16.1 Update r1
Juniper ≫ Junos Version 16.1 Update r2
Juniper ≫ Junos Version 16.1 Update r3
Juniper ≫ Junos Version 16.1 Update r3-s10
Juniper ≫ Junos Version 16.1 Update r4
Juniper ≫ Junos Version 16.1 Update r5
Juniper ≫ Junos Version 16.1 Update r5-s4
Juniper ≫ Junos Version 16.1 Update r6
Juniper ≫ Junos Version 16.1 Update r6-s1
Juniper ≫ Junos Version 16.2 Update r1
Juniper ≫ Junos Version 16.2 Update r2
Juniper ≫ Junos Version 16.2 Update r2-s5
Juniper ≫ Junos Version 17.1 Update r1
Juniper ≫ Junos Version 17.1 Update r2
Juniper ≫ Junos Version 17.2 Update r1
Juniper ≫ Junos Version 17.2 Update r1-s7
Juniper ≫ Junos Version 17.2 Update r2
Juniper ≫ Junos Version 17.3 Update r1
Juniper ≫ Junos Version 17.3 Update r2
Juniper ≫ Junos Version 17.3 Update r3
Juniper ≫ Junos Version 17.4 Update r1
Juniper ≫ Junos Version 17.4 Update r2-s2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.71% 0.743
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
Juniper 6.5 2.8 3.6
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.securityfocus.com/bid/106519
Third Party Advisory
VDB Entry
https://kb.juniper.net/JSA10913
Patch
Vendor Advisory